GeoTrustECCCNCAG2.crt: CN=GeoTrust ECC CN CA G2,O=DigiCert Inc,C=US (Intermediate Certificate, Expiring 2030-03-04) detail info and audit record

Last Updated: 2023-05-06

Page content

CA Certificate Information and Audit Record

This certificate is intermediate certificate used for the issuance of other certificates.

Certificate Download URL: http://cacerts.digicert.cn/GeoTrustECCCNCAG2.crt (in DER format )
Serial Number : 13689760405096422298350605284056346551
SHA-1 Fingerprint : 3d1c554b1cd5e930a4a8c9928ad5519146f9d6a8
SHA-1 Fingerprint : 3d:1c:55:4b:1c:d5:e9:30:a4:a8:c9:92:8a:d5:51:91:46:f9:d6:a8
SHA-256 Fingerprint : 7caeec680e6497fc5109073f83816e798f27f8968a2663c1c95711b548192e35
SHA-256 Fingerprint : 7c:ae:ec:68:0e:64:97:fc:51:09:07:3f:83:81:6e:79:8f:27:f8:96:8a:26:63:c1:c9:57:11:b5:48:19:2e:35
Signature Hash Algorithm : sha256
Subject : CN=GeoTrust ECC CN CA G2,O=DigiCert Inc,C=US
- Country Name: US (United States of America)
- Organization: DigiCert Inc
- Common Name: GeoTrust ECC CN CA G2
Not Valid Before: 2020-03-04 12:04:45
Not Valid After: 2030-03-04 12:04:45
Issuer (Parent Certificate):
- Issuer Name: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
- Issuer Certificate URL: NA
Audit Record:
- Revocation Status: Not Revoked
- Certificate Policy (CP) URL: Unknown
- Certificate Practice Statement (CPS) URL: Unknown
- No public standard audit information was found by E2Encrypted.com. We update this information regularly, check back later.
- Check its issuer’s audit information: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US .

Download certificate through curl:

curl -sSL "http://cacerts.digicert.cn/GeoTrustECCCNCAG2.crt" --output cert.crt

Download certificate through wget:

wget -q "http://cacerts.digicert.cn/GeoTrustECCCNCAG2.crt" --output-document=cert.crt

CA Certificate Detail Information

Use openssl x509 to decode DER certificate to get detail information:

openssl x509 -in cert.crt -inform der -text -noout

Use openssl x509 to decode PEM certificate to get detail information:

openssl x509 -in cert.crt -inform pem -text -noout

Decoded detail certificate information:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4c:8d:4c:91:17:d7:c7:1f:ad:dd:93:32:b5:af:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
        Validity
            Not Before: Mar  4 12:04:45 2020 GMT
            Not After : Mar  4 12:04:45 2030 GMT
        Subject: C=US, O=DigiCert Inc, CN=GeoTrust ECC CN CA G2
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub: 
                    04:9f:85:01:59:72:48:37:1d:a1:91:e2:2c:aa:2b:
                    0e:f7:1c:59:ac:71:37:c9:51:1f:cf:f6:f1:54:d9:
                    6a:e0:9c:60:22:aa:83:7b:0f:06:56:49:cf:95:7f:
                    7f:fd:ed:8f:dc:30:7f:8f:37:f7:bb:1d:6b:55:07:
                    0c:10:c7:ad:c9
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FA:F0:22:1E:C1:3E:98:18:61:87:DB:67:FD:CE:46:A3:42:72:82:08
            X509v3 Authority Key Identifier: 
                keyid:03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55

            X509v3 Key Usage: critical
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.cn

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.digicert.cn/DigiCertGlobalRootCA.crl

            X509v3 Certificate Policies: 
                Policy: 2.16.840.1.114412.1.1
                  CPS: https://www.digicert.com/CPS
                Policy: 2.16.840.1.114412.1.2
                Policy: 2.23.140.1.2.1
                Policy: 2.23.140.1.2.2

    Signature Algorithm: sha256WithRSAEncryption
         75:b6:1b:f9:6a:8b:60:93:ad:eb:83:aa:4a:d8:54:f9:f7:6e:
         fb:2b:0f:66:a9:37:14:ca:70:c9:4c:10:c3:01:ec:e3:cf:59:
         eb:1c:d3:94:cc:eb:0c:7e:94:f1:14:1a:89:3a:39:b7:e1:36:
         dd:8a:9f:7b:9a:4a:a8:b6:4f:fc:b0:a6:ab:2f:e3:85:4e:d7:
         03:6c:cc:bc:b8:83:27:a8:f0:c1:e7:ad:69:48:99:16:f9:d7:
         05:93:48:34:53:49:56:bd:94:96:30:f2:7d:73:e0:f9:8e:73:
         51:40:f9:eb:1f:4b:76:12:19:c7:cd:44:fe:d5:9e:82:53:57:
         c9:ac:59:a7:1b:7c:ea:44:e5:04:b6:a8:a8:ed:47:08:92:b9:
         a4:92:a7:ab:e0:f1:c0:71:0c:5a:8e:cb:0d:f4:3b:93:0f:bc:
         6b:03:35:2e:e1:36:a1:20:e6:80:62:23:0e:71:43:4b:bb:21:
         bb:2b:b9:c4:5e:88:69:6d:aa:ae:9c:80:71:91:f1:19:aa:41:
         36:e3:de:6f:15:c7:ec:58:d9:e5:94:88:26:b2:c1:80:ee:a1:
         64:85:51:29:6c:27:33:ec:a1:f3:6c:33:bb:d7:f8:fe:37:3d:
         72:c5:5d:15:bb:bd:84:dd:36:52:e0:98:83:a3:5c:f1:98:19:
         5a:fc:c7:dd

CA Certificate in PEM Format

Use openssl x509 to convert certificate from DER format to PEM format:

openssl x509 -in cert.crt -inform der

Converted PEM format certificate:

Decode PEM Certificate online

Download PEM Certificate

Also see Top 1 Millions Domains CA Certificate List

CA Certificate Information and Audit Record

CA Certificate Detail Information

CA Certificate in PEM Format

Related Certificates